Security Scan Report: zxexxnym.bradesco.support.zaka25.duckdns.org

Redirected to:
https://zxexxnym.bradesco.support.zaka25.duckdns.org/study.html
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 9 domains to perform 41 HTTP transactions. The main domain is duckdns.org and was registered 13 years ago.

Submitted URL: https://zxexxnym.bradesco.support.zaka25.duckdns.org

Effective URL:
https://zxexxnym.bradesco.support.zaka25.duckdns.org/study.html
Redirected

The Cisco Umbrella rank of the primary domain is #76,811 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Safe Browsing flags social engineering on a duckdns subdomain carrying the Bradesco bank brand, with 20 HIGH dynamic-DNS IDS alerts and content unrelated to the hostname — a deceptive gateway page.

Risk Factors (5)
Google Safe Browsing Social Engineering detection
Deceptive hostname impersonating a bank brand (Bradesco) on a free duckdns.org subdomain
20 HIGH network IDS dynamic-DNS alerts
Hostname content mismatch / likely cloaking shell page
Large unnamed WebAssembly/JS payload on a trivial link page
Domain age information unavailable

Details

Page Title

zaka

Scan Type

public

Domain Name Analysis

The domain 'zxexxnym.bradesco.support.zaka25.duckdns.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'zxexxnym.bradesco.support.zaka25'. Count 7 characters in 'duckdns' with one vowel and 6 consonants. Breaking it apart gives two words: duck, dns. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://zxexxnym.bradesco.support.zaka25.duckdns.org

Page Load Overview

1.43s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:122 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
99%
entertainment media
98%
forum community discussion
85%
technology software
66%
cryptocurrency blockchain
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5147.224.137.194Oracle · CLOUDChicago, Illinois, United States
AS31898Oracle Corporation
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
3162.159.128.233Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.157.120Google · CDNUnited States
AS15169Google LLC
3172.66.0.227Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3146.75.122.248Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.13.97Google · CDNUnited States
AS15169Google LLC
4113--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10D43C65536F32A3F2AA38178677FD348F6B15007ED01CC08BAECE5886F55994C9626B8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:aNDaFhkCQUt+RvR6qPF9UejpH+6hiJGPqKp3URTYeS6/srynR7GDfF5sfWXdfRW:TQFR6qPFuebQjRS3Xdfk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55852:RpKPAhwQDYaSYsBCPBDxwB54SAiWUBIWAEGS4kIAwzgBK3yAIckjAIEIIg4mMTlEKqEDKACQoQQhHYVwIBgINY0hhEAZxgkc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000181c1c0000
Perceptual Hash:dfe0e2d888f1aac4
Difference Hash:0000003030380001
Wavelet Hash:fff0809cbcbc8081
Color Hash:#931f3c

Other Hashes

Crop Resistant:0000003030380001

Scan History

Scan history not available

Unable to load historical scan data